Hi All
I'm having some trouble getting a wireguard site-to-site connection working; wireguard is enabled and configured on each side but neither shows any handshake or traffic. Both of the WAN addresses are static and public. Here are the diagnostic steps I have take so far:
- Tested networking between the WAN addresses on the two sites using both ICMP and TCP socket tests, both pass
- Rebuilt the tunnel using public keys without special characters
- Ran firmware Health audit
- Stoped and started Wireguard service using every means available as well as rebooting both firewalls
- Ran wg command in shell, both sides show appropriate configs
- Ran packet captures on both WAN ports filtered to UDP and Wireguard port, shows no traffic
Anyone have any ideas what I am missing here?
My colleague figured it out: assigning the wg0 interface under Interfaces - Assignments and then enabling it immediately fixed the issue. Oddly enough, this was only required on one end of the tunnel; Wireguard on the other OpnSense device worked fine without this fix.